pillow Heap-based Buffer Overflow | Vulnerability CWE-122 | CVE-2023-4863 | CVSS 9.6

[FarmerManUK24]

Morning

I downloaded Nvidia's Github repository for Cosmos and immediately ran some existing security tools on the source code.

I like SNYK security tool.

While running Cosmo repository through SNYK, the tool identified 1 CRITICAL and 11 HIGH security vulnerabilities. Forwarding for your awareness. Know these tools can sometime create False Positives. Below is descriptor on the CRITICAL alert.

https://security.snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878

SNYK is a great tool if you've never used it for security testing.

Great work folks.

Frank